build: make package private and update repository

The package needs to be set to private, as we aren't members of @semantic-release, and so can't publish this to NPM. The licence and repository URL were also out of date, and have now been updated.